NCC Group is a British cyber security services firm offering incident response, technical assurance including penetration testing, managed security services, security consulting and threat intelligence. Its clients come from financial services, the public sector, energy, health and telecoms. Most of its offer is delivered by consultants and analysts, with managed monitoring and a 24/7 incident response hotline, so it is not a single software product.
NCC Group plc is incorporated in England, has its head office in Manchester, and its shares are listed on the London Stock Exchange. No controlling shareholder or foreign parent was identified in the sources consulted. As a UK company it sits outside the EU and EEA, so transfers of European personal data depend on the transfer mechanisms agreed with the firm. The public website does not state where service data is stored. A European organisation should ask where engagement data and security findings are held, which subcontractors can access them, and how the contract covers transfers outside the EU.